The vulnerability identified as CVE-2026-17941 affects Google Chrome on iOS versions before 151.0.7922.72. It involves an inappropriate implementation that enables a remote attacker to spoof the Omnibox, misleading users about the URL they are visiting. This spoofing is achieved via a crafted HTML page. The issue is classified with low severity by the Chromium security team. No CVSS score or detailed exploit information is provided. There is no explicit vendor advisory or patch link included in the data.

The impact is limited to the potential for URL bar spoofing, which could mislead users about the authenticity of a website they are visiting. This could facilitate phishing or social engineering attacks but does not indicate direct code execution or data compromise. The severity is considered low by the vendor.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update Google Chrome on iOS to version 151.0.7922.72 or later once the update is available. Until then, be cautious of suspicious links and crafted HTML pages that may attempt to spoof the URL bar.